MY
Database
MySQL
by Oracle · last CVE Apr 21, 2026
1,327
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 43Medium 450Low 0
Watch

Add MySQL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-21310
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21309
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21308
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 8.0.0 through 8.0.27
CVE-2022-21307
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21290
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 8.0.0 through 8.0.27
CVE-2022-21289
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21288
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21287
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21286
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21285
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21284
6.3
3%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21280
6.3
77%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2022-21279
6.3
79%
Jan 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2020-2768
6.3
1%
Apr 15
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.3.0 through 7.3.28; 7.4.0 through 7.4.27; 7.5.0 through 7.5.17; 7.6.0 through 7.6.13; 8.0.0 through 8.0.19
CVE-2017-3291
6.3
0%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Affected: 5.5.0 through 5.5.53; 5.6.0 through 5.6.34; 5.7.0 through 5.7.16
CVE-2019-2969
6.2
1%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)
Affected: 5.6.0 through 5.6.44; 5.7.0 through 5.7.26; 8.0.0 through 8.0.16
CVE-2021-2307
6.1
1%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging)
Affected: 8.0.0 through 8.0.23
CVE-2016-0640
6.1
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10
CVE-2024-21166
5.9
1%
Jul 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.36; 8.3.0
CVE-2023-21875
5.9
2%
Jan 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption)
Affected: 8.0 through 8.0.31
CVE-2022-21352
5.9
1%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.26
CVE-2021-2356
5.9
2%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)
Affected: 5.0.0 through 5.7.34; 8.0.0 through 8.0.25
CVE-2021-2011
5.9
3%
Jan 20
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.7.0 through 5.7.32; 8.0.0 through 8.0.22
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: through 8.0.22
CVE-2020-2804
5.9
3%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached)
Affected: 5.6.0 through 5.6.47; 5.7.0 through 5.7.29; 8.0.0 through 8.0.19
CVE-2020-2574
5.9
4%
Jan 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.6.0 through 5.6.46; 5.7.0 through 5.7.28; 8.0.0 through 8.0.18
CVE-2020-2573
5.9
3%
Jan 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.7.0 through 5.7.28; 8.0.0 through 8.0.18
CVE-2020-2570
5.9
3%
Jan 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.7.0 through 5.7.28; 8.0.0 through 8.0.18
CVE-2018-3123
5.9
2%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: libmysqld)
Affected: 5.6.0 through 5.6.42; 5.7.0 through 5.7.24; 8.0.0 through 8.0.13
CVE-2018-0735
5.9
5%
Oct 29
Timing attack against ECDSA signature generation
Affected: through 5.6.42; 5.7.0 through 5.7.24; 8.0.0 through 8.0.13
CVE-2018-3144
5.9
4%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit)
Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2018-2761
5.9
4%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 through 5.5.59; 5.6.0 through 5.6.39; 5.7.0 through 5.7.21
CVE-2016-3588
5.9
2%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect integrity and availability via vectors related to Server: InnoDB
Affected: through 5.7.12
CVE-2015-3152
5.9
7%
May 16
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows…
Affected: through 5.7.2
CVE-2016-2047
5.9
4%
Jan 27
The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and…
Affected: 5.5.0 through 5.5.48; 5.6.0 through 5.6.29; 5.7.0 through 5.7.11
CVE-2026-34318
5.8
0%
Apr 21
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2017-3265
5.6
1%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Affected: 5.5.0 through 5.5.53; 5.6.0 through 5.6.34; 5.7.0 through 5.7.16
CVE-2025-50085
5.5
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2024-21163
5.5
1%
Jul 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.37; 8.4.0
CVE-2024-20969
5.5
1%
Jan 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0
CVE-2024-20967
5.5
1%
Jan 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)
Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0
CVE-2023-21880
5.5
1%
Jan 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.31
CVE-2023-21877
5.5
1%
Jan 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0 through 8.0.31
CVE-2022-21479
5.5
2%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.28
CVE-2022-21478
5.5
1%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.28
CVE-2022-21425
5.5
1%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: 8.0.0 through 8.0.28
CVE-2021-22570
5.5
3%
Jan 26
Nullptr dereference when a null char is present in a proto symbol
Affected: through 8.0.28
CVE-2022-21378
5.5
1%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.27
CVE-2022-21367
5.5
1%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling)
Affected: 5.7.0 through 5.7.36; 8.0.0 through 8.0.27
CVE-2022-21301
5.5
2%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: 8.0.0 through 8.0.27
Page 5 of 10 · 500 total
1…456…10
The 500 most important CVEs for this product (exploited first, then by severity)